CVE-2024-45671

Summary

IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8

uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Affected Software

VendorProductVersion RangeStatus
IBMSecurity Verify Information Queue10.0.5affected
IBMSecurity Verify Information Queue10.0.6affected
IBMSecurity Verify Information Queue10.0.7affected
IBMSecurity Verify Information Queue10.0.8affected

Weaknesses

  • CWE-327: CWE-327 Use of a Broken or Risky Cryptographic Algorithm

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References